Abstract
This article covers the basics of acquiring a disk image from a Macintosh computer. It details a number of techniques that are available to the forensic examiner and covers other related issues. These include the use of open Firmware to determine the date and time of the internal computer clock. Once the disk image has been obtained, the article then considers a number of ways that the Macintosh can be used in the examination of the image. The article concludes with a look at the future of the Macintosh computer in the light of the move to the Intel chipset.
Sign-in/Register to access full text options 
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Schedule a callDisclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.
